elevenlabs-install-auth
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill facilitates the installation of official ElevenLabs SDKs (
@elevenlabs/elevenlabs-jsandelevenlabs) from standard package registries (NPM and PyPI). These are well-known libraries for the ElevenLabs voice synthesis service. - [SAFE]: Secret management instructions are secure and follow best practices. The skill guides users to store their API keys in
.envfiles or environment variables and provides explicit commands to ensure these files are excluded from version control via.gitignore. - [SAFE]: Network operations are directed solely to the official ElevenLabs API endpoint (
api.elevenlabs.io) for the purpose of authentication verification and quota checking. - [INDIRECT_PROMPT_INJECTION]: The attack surface for indirect prompt injection was evaluated and found to be minimal.
- Ingestion points: API keys provided by the user and JSON responses from the official ElevenLabs API.
- Boundary markers: The skill uses standard shell command structures and clear markdown code blocks to separate instructions from data.
- Capability inventory: The skill requires permissions for writing configuration files and executing shell commands for package installation.
- Sanitization: Input is treated as static configuration values, and the skill does not pass untrusted data into dynamic execution environments.
Audit Metadata